Rule History

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET PHISHING Tech Support/Refund Scam Landing Inbound 2022/04/25"; flow:established,from_server; content:"|20|-|20|Router|20|Login|20|-|20|"; fast_pattern; content:"and|20|IP|20|address.|20|Both|20|are|20|the|20|best|20|ways|20|to|20|login"; classtype:social-engineering; sid:2036337; rev:1; metadata:created_at 2022_04_25, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2022_04_25;)